RE: Using Perl to replicate between Novell E-Directory andNetscapeDirectory Server

[Sean E. <Sea...@by...>]

It is my understanding that it won't do passwords.  The only thing I
know of that will synchronize passwords along with everything else
between NDS and iPlanet (or even Active Directory) is a product called
Synchronicity from NetVision.  It uses NDS as the repository for all the
information.  It will allow you to change an NDS password and get it
replicated to heterogeneous systems.

Sean Eckton
Brigham Young University

-----Original Message-----
From: Craig Robinson [mailto:cra...@en...]=20
Sent: Wednesday, March 27, 2002 3:47 PM
To: Knut Sander; knu...@se...
Cc: Edd Dawson; per...@li...
Subject: RE: Using Perl to replicate between Novell E-Directory
andNetscapeDirectory Server


Edd/Knut,
Have you thought about using iPlanet's meta-directory to do what you
want?

http://docs.iplanet.com/docs/manuals/metadir/50/deploy/overview.htm#1678
2

Cheers, Craig
EPA, Queensland

> -----Original Message-----
> From: per...@li...
> [mailto:per...@li...]On Behalf Of Knut
> Sander
> Sent: Thursday, 28 March 2002 1:56 AM
> To: knu...@se...
> Cc: Edd Dawson; per...@li...
> Subject: Re: Using Perl to replicate between Novell E-Directory and
> NetscapeDirectory Server
>=20
>=20
> What Jim says is perfectly right - never replicate data if you can
> avoid.=20
> In Fact replicating passwords won't work between systems using diffren
> password schemes, what is the case for Netscape and NDS.
>=20
> I do not have a working solution for your problem but I don't see, why
> Cognos stuff only supports Netscape. If it uses plain LDAPv3=20
> you may be
> able to create a NDS to LDAP mapping (object classes and attribute
> names) which looks like a Netscape LDAP.
> An other idea, which may work, is to use the LDAP-proxy=20
> functionality of
> Netscape to connect your webserver to the Netscape directory which
> delegates the requests to NDS.
>=20
> If you find a good solution I would be intrested ...
>=20
> -knut
>=20
>=20
> Jim Harle wrote:
> >=20
> > This is an ugliness of using 2 different directories.  We=20
> are looking into
> > how to coordinate passwords eDirctory and Active Directory.=20
>  The problem
> > is that password values are stored internally and can't be=20
> read, thus not
> > copiable between the two.  The only way to make this work=20
> is to have the
> > password changing mechanisms send things to both places. =20
> That in itself
> > is very difficult if you have multiple mechanisms.
> >   --Jim Harle
> >=20
> > On Tue, 26 Mar 2002, Edd Dawson wrote:
> >=20
> > >
> > > Hi,
> > >
> > > Just an idea i'd like to run past people, and see if you=20
> think i'm barking
> > > up the wrong tree completely!
> > >
> > > At work we use Novell E-Directory for all our=20
> authentication needs, and i
> > > have used perl-ldap for talking to and unpdating E-directory.
> > >
> > > We have bought Cognos Impromptu Web, which for those who=20
> dont know serves
> > > reports via the web. Users have to log into it, and it=20
> uses Netscape
> > > Directory Server (which is ldap based) for user=20
> authentication... it will
> > > not let us use E-Directory for user authentication.
> > >
> > > We want to be able to sync the usernames and passwords in Netscape
> > > Directory Server with those in Novell E-Directory using=20
> Ldap, and most
> > > likely perl for writing the sync-ing mechanism.
> > >
> > > Does this seem like a reasonable proposition, and has=20
> anyone here ever had
> > > any experience of doing such a thing?
> > >
> > > Thanks for your time
> > > Edd Dawson
>=20
>=20